Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/EclbBr2K9LHxO5dU7-DKYHrXAh0.roa
File:                     EclbBr2K9LHxO5dU7-DKYHrXAh0.roa (raw, json)
Hash identifier:          4bCpeOOvxH+tgf6vTJznEx/jCpqfGxwqa/2gzn1Xrn0=
Subject key identifier:   11:C9:5B:06:BD:8A:F4:B1:F1:3B:97:54:EF:E0:CA:60:7A:D7:02:1D
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       FB
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/EclbBr2K9LHxO5dU7-DKYHrXAh0.roa
Signing time:             Wed 24 May 2023 16:03:15 +0000
ROA not before:           Wed 24 May 2023 16:03:15 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.96.227.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 251 (0xfb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 24 16:03:15 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=11C95B06BD8AF4B1F13B9754EFE0CA607AD7021D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:99:bf:08:4e:03:c1:45:33:a0:23:4e:89:25:
                    4a:27:f0:79:c6:a9:95:5a:ca:9b:4c:33:fa:66:19:
                    89:cc:34:35:b6:02:dd:d2:8a:9d:95:f9:5b:8f:23:
                    a7:b3:ac:07:c3:5f:f5:32:33:04:a2:11:45:bc:89:
                    4f:70:da:2d:1c:47:9b:30:2b:be:9e:b1:88:95:18:
                    27:bd:15:76:cf:aa:c1:dc:30:97:1a:0b:dc:00:83:
                    d8:85:42:e1:94:3c:76:99:7b:3d:e4:4f:6a:79:0b:
                    ee:7b:b1:16:9a:0f:3c:ac:72:9f:08:d8:f2:f9:28:
                    79:65:c3:cc:54:ca:7f:31:b0:3f:3e:cb:03:e7:26:
                    af:4f:fa:88:4a:ee:9b:82:b4:95:90:5f:2a:1b:45:
                    1b:19:a2:f5:cd:16:84:d8:01:62:45:cd:43:05:8d:
                    fb:90:c6:33:51:00:32:6b:8a:62:e1:5e:db:13:73:
                    80:f3:19:d8:28:23:52:4f:cb:9d:6a:67:66:2f:eb:
                    24:38:9f:df:e1:fe:74:bd:ac:86:41:bf:72:3d:0b:
                    31:b2:bc:38:b0:07:61:e7:1e:cd:2b:75:72:d6:ef:
                    b4:80:0e:fb:c7:b2:88:a6:c0:40:c9:20:8b:eb:c7:
                    06:40:8a:bd:3a:5a:4f:e2:64:51:11:29:e8:24:fd:
                    4e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:C9:5B:06:BD:8A:F4:B1:F1:3B:97:54:EF:E0:CA:60:7A:D7:02:1D
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/EclbBr2K9LHxO5dU7-DKYHrXAh0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.96.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:a4:a6:d6:5b:e4:0c:f9:74:25:04:b4:5f:cd:62:05:52:52:
         fa:a6:07:bb:eb:50:9d:15:f6:c4:22:0f:83:5d:9a:52:1c:d6:
         d8:66:7d:2d:a1:c9:60:43:b8:4d:c2:71:43:26:fb:f6:ae:8f:
         75:90:26:47:61:ab:51:7e:72:04:b2:a6:07:e6:c3:62:10:c5:
         99:2d:f7:92:84:b8:0e:32:a8:2e:b9:f3:b0:4c:20:3b:d2:ec:
         7d:f2:01:9e:de:a6:33:8e:e6:61:cf:c6:b1:82:01:a6:8b:c5:
         0b:6d:29:08:ee:b8:dd:ce:f8:37:f6:35:a3:fc:7a:f0:0f:c2:
         18:38:ff:1e:12:60:6d:6a:5e:76:cf:e4:69:eb:ea:3f:5b:af:
         88:07:19:bc:a1:3a:bf:61:66:98:75:5b:f5:a8:70:01:85:b5:
         77:eb:97:2b:d8:37:35:66:56:ea:ee:99:fe:c4:59:47:17:ea:
         db:11:ea:3d:f3:58:27:46:cc:3e:38:d4:24:69:ea:2a:e3:e8:
         db:6a:42:44:42:a6:06:5a:24:d8:b2:e8:cc:32:f9:72:0c:68:
         a6:f8:90:e3:70:37:55:6d:fa:7e:db:dd:d9:e3:31:3d:d7:c4:
         ef:26:bb:90:53:6c:77:6a:ea:0b:ae:5d:59:e1:1e:aa:b6:af:
         2d:5b:08:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:01 2024 by rpki-client on console-ams.rpki-client.org